GPO applying when it shouldn't